Privacy Policy

Last Updated: April 15, 2026

1. Who We Are

Still is a premium mindfulness and affirmation application developed by BitBrain Apps. This Privacy Policy explains how we collect, use, store, and protect your personal data when you use the Still app or website. By using Still, you agree to the practices described here.

You must be at least 13 years old to use Still. Our services are not directed to children under 13, and we do not knowingly collect personal information from anyone under that age.

2. Data We Collect

Still is designed to be a private-first experience. We collect the minimum data required to provide our services:
  • Account & Profile Information: Your display name, username, email address, and optional profile photo when you create an account. This is used to identify you and sync your data across devices.
  • Practice Statistics: We track practice frequency — Focus Mode sessions, Affirmations played, and Reflections written — to calculate streaks, milestones, and achievements.
  • User-Created Content: Affirmations, manifestations, journal entries, and mood logs you create are stored and synced with your account.
  • Voice Recordings: Voice notes you record for personal affirmations are stored on your device and optionally synced with your account. The microphone permission is used solely for recording your personal affirmations. Voice messages sent in direct chats are stored securely and only accessible to the chat participants.
  • Community Data: If you opt into community features, your display name, username, profile photo, and content you post (milestones, affirmation shares) are visible to other authenticated Still users. Sharing is strictly opt-in and never automatic.
  • Direct Messages & Chat: Messages and voice notes exchanged in direct chats are stored securely and are only accessible to the two participants of that conversation. We do not read private messages.
  • Report Data: If you submit a user or content report, we collect the reason for the report and any optional screenshot you attach. This information is used solely for moderation purposes and is only accessible to our admin team.
  • Device & Usage Data: Anonymous analytics data (app performance, crash reports, feature usage frequency) to improve the app. This data is not linked to your identity.
  • Images: Profile photos and community post images you upload are stored securely. Image search results displayed in the app are powered by the Pixabay API; we cache these images on our servers to improve performance. Your search queries within the app are not shared with Pixabay in a personally identifiable way.

3. How We Use Your Data

We use your data only to:
  • Provide, maintain, and personalize your Still experience.
  • Manage your account and enable cross-device sync.
  • Calculate and display your practice streaks and achievements.
  • Enable direct messaging between users who are mutually connected.
  • Facilitate community interaction through milestone and affirmation sharing (only when initiated by you).
  • Review reports submitted by users to enforce our Community Guidelines and Terms of Service.
  • Improve app performance using anonymous analytics.
  • Respond to your support requests.
We do not sell your personal data to third parties. We do not use your data for advertising.

4. Data Processors & Third Parties

We use the following trusted third-party services to operate Still. Each is bound by their own privacy policies and data processing agreements:
  • Google Firebase (Firestore, Auth, Storage): Authentication, database, and file storage. Firebase processes data on our behalf and is governed by Google's privacy policy and data processing terms.
  • Pixabay API: Used for in-app image search. Image results are cached on our servers. No personally identifiable information is transmitted to Pixabay.
  • Google Play: App distribution. Subject to Google's terms for app purchases.

5. Storage, Sync & Retention

  • Local Storage: Some data (affirmations, recent sessions) is cached on your device for offline use.
  • Cloud Storage: Account data is securely stored on Firebase servers, which may be located in the United States or other regions where Google operates data centers.
  • Retention: We retain your data for as long as your account is active. If you delete your account, all personal data — including your profile, content, messages, and voice notes — is permanently deleted within 30 days. Report data may be retained for up to 90 days for safety and moderation purposes after account deletion.
  • Banned Accounts: If your account is banned for violations of our Terms of Service, your email address is retained in a restricted list to prevent re-registration. All other personal data is deleted as described above.

6. Data Security

We use industry-standard security measures to protect your data, including encrypted data transmission (TLS), Firebase Security Rules to restrict data access to authorized users only, and access controls limiting admin access to a verified team. Chat audio and report screenshots are stored with strict per-user access rules — only the participants of a conversation or authorized admins can access those files. No security system is 100% infallible; in the event of a data breach we will notify affected users in accordance with applicable law.

Journal entries, reflections, and mood logs are protected the same way as your other account data — encrypted in transit and restricted by Firebase Security Rules to your account only. They are not additionally end-to-end or field-level encrypted, so as with any cloud-synced content, authorized Still personnel could technically access this data if required for support, safety, or legal compliance, though we do not do so as a matter of routine practice. If you'd prefer this content to stay off our servers entirely, avoid entering sensitive information in journal or reflection fields.

7. Your Rights & Controls

You have the following rights over your data:
  • Access: View your profile and data at any time within the app.
  • Correction: Update your display name, username, and profile photo at any time in Settings.
  • Export: Export your personal data via Privacy & Security settings in the app.
  • Deletion: Delete your account and all associated data permanently at any time via Settings → Privacy & Security → Delete Account. Deletion is irreversible.
  • Opt-Out of Community: You can set your profile to private or remove yourself from community features at any time.
  • Withdraw Consent: You may revoke microphone or storage permissions via your device settings at any time.
If you are located in the European Economic Area (EEA) or the United Kingdom, you also have rights under GDPR, including the right to lodge a complaint with your local data protection authority.

8. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last Updated" date at the top of this page and, where appropriate, notify you within the app. Your continued use of Still after changes are posted constitutes your acceptance of the updated policy.

9. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us at:
support@stillapp.com